CodeQL flags the value as clear-text logging of sensitive info. Print the username and reference the --password flag instead of its value. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>